HackingHealthcareHealthcareDelayed DiscoveryIdentity (basic)Government IDMediumContained

Briggs Healthcare Home

bd_08cf20267902c201 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 22, 2021

Filed

Feb 7, 2022

To disclose

46 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Briggs Healthcare Home →

Briggs Healthcare, Inc. notified the NH AG of unauthorized network access between March 18-22, 2021, discovered March 22, 2021. Affected data included names, addresses, and SSNs. One NH resident affected. Notices sent Feb 2, 2022. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 46 weeks / 322 days

Mar 18, 2021

Begins

Mar 22, 2021

Discovered

Feb 7, 2022

Filed

vs. sector median

+34 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_1430b804f09914ed2022-02-02 · +5dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Briggs Healthcare Home
norm: briggs healthcare home
Domain: briggshealthcare.com
Industry: Healthcarellm

Discovered: Mar 22, 2021
Breach occurred: Mar 18, 2021 – Mar 22, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 2, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Moved quickly to secure the network
Began an investigation to identify what happened
Undertook extensive efforts to locate address information
Provided notice to affected individuals
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for one (1) year, through Experian
Resetting relevant account passwords
Reviewing the contents of the potentially accessed files and folders
Reviewing internal systems to identify contact information
Changes made: Implementing additional safeguards and training to its employees
Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 46 weeks(322 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGFeb 2 · first

New Hampshire State AG+5d · this page

Pattern: first filing Feb 2 (IN), last Feb 7 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/briggs-healthcare-20220207.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2022
Raw hash: f88229356ed478bbd5fa939955d0db41c2fec0a6fa000f375e59d671366c4309

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityBriggs Healthcare Home

Incidentdiscovered Mar 22, 2021

Stated responseMoved quickly to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov